EUVD-2005-1294

Malware in sbrugna...

ASPCart.txt

vendor site: http://www.aspcart.com product: ASP Cart bug: multiples injection sql post & get global risk: high ! injection get : http://site.com/prodetails.asp?prodid='sql injection post : 1http://site.com/display.asp Variables: /display.asp?page='sql 2http://site.com/addcart.asp Variables:...

ASP Cart [multiples injection sql (post & get)]

vendor site: http://www.aspcart.com product: ASP Cart bug: multiples injection sql post & get global risk: high ! injection get : http://site.com/prodetails.asp?prodid='sql injection post : 1http://site.com/display.asp Variables: /display.asp?page='sql 2http://site.com/addcart.asp Variables:...

CVE-2005-1292

The CVE-2005-1292 entry describes multiple cross-site scripting (XSS) vulnerabilities in CartWIZ ASP Cart. The affected component is the CartWIZ ASP Cart web application, with exploitable vectors via the idProduct parameter on tellAFriend.asp and addToWishlist.asp, and via redirect and message pa...

CVE-2005-1291

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to 1 addToCart.asp or 2 productDetails.asp, the 3 priceFrom, 4 idCategory, or 5 priceTo parameter to searchResults.asp, or 6 the idParentCategory paramet...

CVE-2005-1292

Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...

Multiple Sql injection and XSS in CartWIZ ASP Cart

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: High Title: Multiple Sql injection and XSS i...

CVE-2005-1291

Multiple SQL injection vulnerabilities in CartWIZ ASP Cart allow remote attackers to execute arbitrary SQL commands via the idProduct parameter to 1 addToCart.asp or 2 productDetails.asp, the 3 priceFrom, 4 idCategory, or 5 priceTo parameter to searchResults.asp, or 6 the idParentCategory paramet...